Security issue fixed and Heroku config